If this is your first visit, be sure to
check out the FAQ by clicking the
link above. You may have to register
before you can post: click the register link above to proceed. To start viewing messages,
select the forum that you want to visit from the selection below.

Sniffing

Sniffing is actualy like listening to all the network traffic going through a certain point of a network. If you take a look at the osi module, and at the basic functionality of routers, switchs and hubs, you would clearly see why sniffing from a "remote" machine(assuming "remote" means across a router or switch) is not possible. however, if one was o gain access to the switch of the "sniffed" machine, one could surly view all traffic destined to and from that machine.

Network analysis.

This falls under my remit.

It depends on how the network is set up and the information you want. As far as software agents go I donít know what is available but I do know what information you can gather based on the Sniffers location.

Most systems plug directly into the switch, which is a network analysis nightmare.

The ideal place for gathering data would be a trunk link, but interception would require you to have access to a switch (for port mirroring) or taps/splitters.

This being the case I donít feel that an agent based Sniffer would be good for traffic interception. However it would be outstanding for intelligence gathering. It is a useful network management exercise to plug a Sniffer into a Switch just to watch the broadcast traffic. You can see who is on the network, services available (WINS etc) and so on.

From the data gathered you can the do more in depth lookup on the nodes discovered DNS etc.

One of the best sniffing information

"all information can be sniffed , exist many methods to do that i thing (DNS,ROUTER,...) Spoofing can very usefull to do That , spoofing a Remote Computer on the LAN you'll could get all access,All protocols information .Trojans Normaly can be found easy by Firewall , the point is "be invisible" to give a SPY contitions on LAN a recomed you to Get {.C} scripts that do that if you couldant do that.". Have a nice Spoofing.